Remove SECURITY.md #640
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Continuous Integration | |
| on: | |
| push: | |
| pull_request: | |
| permissions: | |
| id-token: write | |
| contents: read | |
| pull-requests: write # for removing tags | |
| issues: write # for peter-evans/create-or-update-comment on the PR | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.event.number || github.event.pull_request.head.sha }} | |
| cancel-in-progress: true | |
| jobs: | |
| integration_test: | |
| # Fork PRs run untrusted code; skip them so AWS credentials are never exposed. | |
| if: ${{ github.event_name == 'push' || github.event.pull_request.head.repo.full_name == github.repository }} | |
| runs-on: ${{ matrix.os }} | |
| defaults: | |
| run: | |
| shell: bash | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| os: [ubuntu-latest] | |
| python: ["3.10"] | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 | |
| - name: Setup Miniconda | |
| uses: conda-incubator/setup-miniconda@fc2d68f6413eb2d87b895e92f8584b5b94a10167 # v3 | |
| with: | |
| activate-environment: assistant_py3 | |
| environment-file: .github/workflows_env/unittest_env.yml | |
| auto-update-conda: true | |
| python-version: ${{ matrix.python }} | |
| miniconda-version: "latest" | |
| - name: Free disk space (Ubuntu) | |
| if: matrix.os == 'ubuntu-latest' | |
| run: | | |
| echo "Before cleanup:" | |
| df -h | |
| sudo rm -rf /usr/share/dotnet /usr/local/lib/android /opt/ghc /opt/hostedtoolcache/CodeQL | |
| sudo apt-get clean | |
| echo "After cleanup:" | |
| df -h | |
| - name: Setup OMP for macOS | |
| if: matrix.os == 'macos-latest' | |
| shell: bash -l {0} | |
| run: | | |
| wget https://raw.githubusercontent.com/Homebrew/homebrew-core/fb8323f2b170bd4ae97e1bac9bf3e2983af3fdb0/Formula/libomp.rb | |
| if brew list | grep -q libomp; then | |
| brew unlink libomp | |
| fi | |
| brew install libomp.rb | |
| rm libomp.rb | |
| - name: Check if changes beside docs | |
| uses: dorny/paths-filter@d1c1ffe0248fe513906c8e24db8ea791d46f8590 # v3 | |
| id: changes | |
| with: | |
| filters: | | |
| other_than_docs: | |
| - '!(docs/**)**' | |
| - name: Integration Test | |
| if: steps.changes.outputs.other_than_docs == 'true' | |
| uses: ./.github/actions/test-assistant | |
| with: | |
| aws-role-arn: ${{ secrets.AWS_CI_ROLE_ARN }} | |
| submodule-to-test: integration | |
| build_doc: | |
| if: ${{ github.event_name != 'schedule' && (github.event_name == 'push' || github.event.pull_request.head.repo.full_name == github.repository) }} | |
| needs: [integration_test] | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 | |
| with: | |
| fetch-depth: 0 | |
| - name: Setup Env Vars | |
| uses: ./.github/actions/setup-env-vars | |
| - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5 | |
| with: | |
| python-version: '3.10' | |
| - uses: r-lib/actions/setup-pandoc@d3c5be51b12e724e68f33216ca3c148b66d5f0b6 # v2 | |
| - name: Configure AWS Credentials | |
| uses: aws-actions/configure-aws-credentials@7474bc4690e29a8392af63c5b98e7449536d5c3a # v4 | |
| with: | |
| role-to-assume: ${{ secrets.AWS_CI_ROLE_ARN }} | |
| role-duration-seconds: 3600 | |
| aws-region: us-west-2 | |
| - name: Build Doc(For push) | |
| if: ${{ github.event_name == 'push' }} | |
| run: | | |
| chmod +x ./.github/workflow_scripts/build_doc.sh | |
| ./.github/workflow_scripts/build_doc.sh '${{ github.ref }}' '${{ github.repository }}' '${{ env.SHORT_SHA }}' | |
| - name: Build Doc(For pull request) | |
| if: ${{ github.event_name == 'pull_request' }} | |
| env: | |
| branch: ${{ github.event.pull_request.head.ref }} | |
| run: | | |
| chmod +x ./.github/workflow_scripts/build_doc.sh | |
| ./.github/workflow_scripts/build_doc.sh "$branch" '${{ github.event.pull_request.head.repo.full_name }}' '${{ env.SHORT_SHA }}' PR-'${{ github.event.number }}' | |
| - name: Comment on PR | |
| if: ${{ github.event_name == 'pull_request' }} | |
| uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # v4 | |
| with: | |
| issue-number: ${{ github.event.number }} | |
| body: | | |
| Job PR-${{ github.event.number }}-${{ env.SHORT_SHA }} is done. | |
| Docs are uploaded to https://d1at46xkvcde0c.cloudfront.net/PR-${{ github.event.number }}/${{ env.SHORT_SHA }}/index.html |